BlogNotes for engineers evaluating agent skills, MCP servers, and install-time policy.October 27, 2026 · KillerSkillsWhy the agent skill supply chain breaks (and how KillerSkills fixes it)Agent skills and MCP servers sit inside the agent trust boundary. Why allowlists and static scans fall short, and how install-time honeypot verdicts fix it.